Re: [SSSD] [PATCHES] Attribute exclusion in LDAP

[Jakub Hrozek]

On Mon, May 28, 2012 at 05:11:07PM +0200, Jan Zelený wrote:
> The first patch (#131) adds the functionality and updates all parts of code 
> which use it.
>
> The second patch (#132) utilizes the exclusion when retrieving data for 
> initgroups.

This breaks nested group processing in the IPA provider. We use the
member attribute there to construct correct memberships between groups.